Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          ykf6389Nwchlmt6VFuPFWjHFhpkxsvh+Rqxm9D0N2xM=
Subject key identifier:   26:3C:3C:63:0D:F5:03:6E:21:CC:F5:B4:BE:89:F4:38:DF:5F:BD:E3
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       0197C45BF08623FC137641232D227ECE81DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          15C2
Signing time:             Tue 01 Jul 2025 05:00:49 +0000
Manifest this update:     Tue 01 Jul 2025 05:00:49 +0000
Manifest next update:     Wed 02 Jul 2025 05:00:49 +0000
Files and hashes:         1: 9Wsyc-JvO9JC7caCozj-SAG1bJs.roa (hash: bKm+mUgzyZClr4J+G/kqKks+sApaN1YwjRFddgUbnbE=)
                          2: Ja52sUHZmNxWRgmcFqK35S3gf4U.roa (hash: gzJdIYNLI5m1VhTa8D7lky18Y5IJWwZN4llDEnmcK1o=)
                          3: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: cBCkqcbBKC+/k/IB9werT7B2IhHhrT5qQRwIGIQRfQI=)
                          4: pvgIN6QNHNBs60IvrUFIahwkpN8.roa (hash: SRb6cmNEXQNaL5JeiDfLUBlTpbbbs7eTPPHe0FchMao=)
                          5: qVkX5RlHS3sPyQOw3galYp3H46c.roa (hash: o5KCCl+KevQFiSBwzLjv5f5HLVAkS9bSZz+fAqp6nWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:5b:f0:86:23:fc:13:76:41:23:2d:22:7e:ce:81:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Jul  1 05:00:49 2025 GMT
            Not After : Jul  2 05:00:49 2025 GMT
        Subject: CN=263c3c630df5036e21ccf5b4be89f438df5fbde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:a1:15:04:fb:a4:cd:9a:85:a5:63:ab:65:
                    74:21:76:59:48:60:df:f1:de:3d:f0:42:50:7f:bc:
                    75:bf:b5:7d:6b:b6:1f:17:05:d8:5f:b5:b0:8d:dd:
                    68:cd:c2:d6:6d:15:e4:ba:21:57:65:20:20:b5:3c:
                    40:ca:e2:46:a2:b1:f7:62:6b:8c:20:e5:a5:8f:38:
                    96:86:c5:d9:1c:e4:9c:ae:33:41:e9:44:3f:6f:80:
                    85:ff:99:6a:f5:83:2c:dd:72:42:ca:a3:c4:ec:87:
                    19:d1:e1:1d:66:a6:dd:ba:4b:a3:16:39:00:4c:72:
                    ef:8e:28:8f:e6:5d:d6:27:09:f5:3a:45:c7:11:6c:
                    24:38:6e:80:0b:d6:26:fd:12:a1:79:41:d8:35:60:
                    10:2d:43:54:fa:65:54:f2:3e:c3:da:ed:c1:1d:19:
                    7c:24:09:5b:62:ba:2a:11:e5:7f:21:3a:97:83:c6:
                    53:9a:c5:66:5b:05:84:25:92:64:ff:d3:ef:77:2d:
                    fe:4e:95:1a:65:4b:c2:d5:c9:ec:e9:0a:1d:5c:82:
                    d9:99:87:4e:2d:1a:2c:41:fb:ba:97:7b:ab:b5:cb:
                    73:c5:44:28:6f:d0:9b:ec:6e:ac:fa:61:fe:05:96:
                    7b:b4:4c:f0:fc:07:af:7f:31:1f:72:97:cf:06:8b:
                    1e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3C:3C:63:0D:F5:03:6E:21:CC:F5:B4:BE:89:F4:38:DF:5F:BD:E3
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:0e:f9:0a:47:c1:c7:7a:be:64:08:03:80:47:ec:e9:ec:
         9d:46:bf:39:e7:20:e1:5f:70:b3:10:33:78:48:a1:81:e1:da:
         3f:41:1d:6f:01:76:58:6b:eb:7b:7d:62:76:ca:37:7e:6a:4f:
         22:58:59:bb:28:82:d9:f7:c8:e3:c0:bc:08:4d:8b:9b:8b:ba:
         f0:c6:3c:dc:a1:25:09:82:de:30:45:0d:3a:ea:ff:60:15:0b:
         38:f9:8e:2d:5a:f9:56:76:92:99:44:fa:1a:b4:c3:4f:ab:11:
         cb:1a:12:c4:68:6f:2e:b6:70:7e:40:cc:5e:28:81:1a:66:69:
         2d:89:a0:6f:65:50:67:19:37:16:4e:5f:ae:d8:97:51:15:7f:
         7f:c8:9a:b3:a3:ac:a6:28:85:f7:53:9f:2b:d5:42:a1:76:2d:
         e5:96:de:c9:2f:ab:77:18:ca:5f:15:7b:20:26:45:6e:0e:93:
         fa:cc:8a:b7:e5:1b:cb:f0:f2:d8:c4:47:18:16:b2:40:d7:97:
         a8:0d:04:5d:5c:e9:8d:90:ac:c7:3d:c7:c7:d8:94:65:43:1e:
         4a:8e:36:23:9b:69:b3:2f:4e:54:f1:95:36:b0:67:82:df:e3:
         d5:75:ab:ff:e6:a6:cf:c7:03:a5:11:6d:43:12:b1:29:d7:ba:
         7a:20:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:17:40 2025 by rpki-client